apple-reminders
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
remindctlCLI tool on macOS to perform actions such as listing, adding, and deleting reminders via shell commands. - [EXTERNAL_DOWNLOADS]: Instructions are provided to install
remindctlusing Homebrew from a third-party tap (steipete/tap) or building from source usingpnpm. These are standard installation methods for the utility. - [PROMPT_INJECTION]: The skill reads and processes user-generated reminder content, which represents an indirect prompt injection surface. Ingestion points: Reminder content is ingested via
remindctl todayandremindctl listas documented in SKILL.md. Boundary markers: The instructions do not include specific boundary markers or warnings to the agent to disregard instructions within tasks. Capability inventory: Commands foredit,delete, andadd(documented in SKILL.md) allow for local data modification. Sanitization: No sanitization or content filtering is specified for the task data.
Audit Metadata